Privacy policy

This policy explains what personal data lidl.jilek.dev ("the site") processes, why, and what your rights are. The site is run by a private individual, called "the operator" here. Questions and requests: privacy@jilek.dev.

Without an account

You can use the site without signing in. We then keep no personal data about you, except:

• Four cookies that remember your choices on this device for a year: the Country Shop (lpt-country-shop), the Display Currency (lpt-display-currency), the language (lpt-language) and the light or dark theme (lpt-theme).
• Technical cookies the site needs to work: a security token for forms (.AspNetCore.Antiforgery) and the connection to the server while a page is open.
• The web server's access logs (IP address, time, the address requested, your browser's identification), kept to run and secure the site and deleted regularly.

There are no analytics, advertising or tracking cookies.

With an account

You sign in with your Google account. Google then gives us your email address, your name and an ID of your Google account; we never see your Google password.

With your account we store those, your settings (language, Display Currency, which emails you want) and what you follow: Favourites, Price Alerts and Back in Stock Alerts.

A sign-in cookie (.AspNetCore.Identity.Application) keeps you signed in for up to 30 days; short-lived cookies protect the sign-in with Google itself.

Emails

If you set an alert, we email you when it fires, and we tell you when a new Revision of something you follow comes out (you can turn that off). Every email has a link to stop it and one to stop all emails.

Emails are sent through Resend (resend.com), an email delivery service based in the United States, which receives your email address and the email's content; it may process them in the United States.

Why we may process it

• Your account, Favourites, alerts and emails: to provide the service you asked for (Art. 6(1)(b) GDPR).
• Access logs and security cookies: our legitimate interest in running a secure site (Art. 6(1)(f) GDPR).
• Preference cookies: they only store choices you made, so the site works the way you set it.

Who else is involved

• Hosting: xTom GmbH, Frankfurt am Main, Germany. The server and its database are in the EU.
• Google: sign-in. The site's fonts are also loaded from Google Fonts, which gives Google your IP address.
• Resend: sending emails (see above).
• Prices come from Lidl's public online shops; nothing about you is sent to Lidl. Promotion texts, which contain no personal data, are read with Google's Gemini AI.

We don't sell personal data or pass it on to anyone else, unless the law requires it.

How long we keep it

• Account data: until you ask us to delete your account. Your Favourites and alerts go with it.
• Database backups are kept for 7 days, so deleted data disappears from them within a week.
• Cookies: as listed above.
• Access logs: deleted regularly.

Your rights

Under the GDPR you can ask to see the data we hold about you, to correct it, to delete it, to restrict or object to its processing, and to receive it in a portable form. Write to privacy@jilek.dev; we answer within a month. For now, deleting your account works the same way.

You can also complain to a data protection authority: in Czechia the Office for Personal Data Protection (uoou.gov.cz), or the authority where you live.

Children

The site is not meant for children under 16, and we don't knowingly collect their data.

Changes

When this policy changes, the date at the top changes too.